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Amendments to the Claims : 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 
Listing off Claims : 

1 . (currently amended): A network authentication apparatus comprising: 
a network interface unit connected with a network and that transmits/receives 

a packet; 

a packet relay unit that relays a received packet in accordance with a 
destination address of the received packet; and 

a filtering processing unit that extracts one or more of a destination MAC 
(Media Acce ss Control) address and a destination IPv6 (Internet Protocol version 6) 
address and a source MAC address , and that extracts onlv an Interface ID part of a 
source IPv6 address contained in the received packet, and that determines whether 
to relay the received packet to the packet relay unit or discard the packet in 
accordance with: 

one or more of a d e st i nation t he destination MAC (Med i a Access Control) 
address and a dest i nat l on t he destination IPv6 (Int e rn e t Protocol version 6) address 
and a sourc e t he source MAC address; and 

onlv the interface ID part of the source IPv6 address extracted from a sourco 
I Pv6 i ntorfaco I D, conta i ned i n t he received packet. 

2. (canceled) 
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3. (currently amended): The network authentication apparatus as claimed 

in claim 1, 

wherein the filtering processing unit further comprises: 
a filtering information storage unit that stores at least one or more of the 
destination MAC address and the destination IPv6 address and the source MAC 
address , that stores the source I Pv6 int e rfac e I D t he interface ID part of the source 
IPv6 address, and that stores judgment information representing whether to relay or 
discard, in association with each other; and 
a processing unit that compares: 

(a) one or more of the destination MAC address and the destination IPv6 
address and the source MAC address , and (b) the source I Pv6 intorfaco I D onlv the 
interface ID part of the source IPv6 address containod inextracted from the received 
packet with (a) one or more of the destination MAC address and the destination IPv6 
address and the source MAC address , and (b) the source IPv6 int e rfac e I D only the 
interface ID part of the source IPv6 address stored in the filtering information storage 
unit, 

wherein when the addresses and 4P& -ID parts match with each other, 
determining whether to relay the received packet to the packet relay unit or discard 
the packet in accordance with the judgment information associated with (a) one or 
more of t he destination MAC address efand the destination IPv6 address and the 
source MAC address, and (b) the source I Pv6 i ntorfaco I Dt he interface ID part of the 
source IPv6 address . 
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4. (currently amended): The network authentication apparatus as claimed 
in claim 1, 

wherein the filtering processing unit comprises: 

a IVIAC filtering unit that determines whether to relay the received packet to 
the packet relay unit or discard the packet in accordance with the destination MAC 
address and the source MAC address contained in the received packet; and 

an IP filtering unit that determines whether to relay the received packet to the 
packet relay unit or discard the packet in accordance with the destination MAC 
address and tho source I Pv6 intorfaco I D only the interface ID part of the source 
IPv6 address conta i nod in extracted from t he received packet. 

5. (currently amended): The network authentication apparatus as claimed 
in claim 4, 

wherein the filtering processing unit further comprises: 
a filtering information storage unit that stores at least the destination MAC 
address and^ the source MAC address or the source I Pv6 i nt e rfac e I D onlv the 
interface ID part of the source IPv6 address and^ the judgment information 
representing whether to relay or discard, in association with each other. 

6. (currently amended): The network authentication apparatus as claimed 
in claim 4, 

wherein the MAC filtering unit further comprises: 

a MAC filtering information storage unit that stores the destination MAC 

address and the source MAC address and the judgment information representing 

whether to relay or discard, in association with each other; and 
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wherein the IP filtering unit further comprises: 

an IP filtering information storage unit that stores the destination MAC 
address and the souroo IPv6 intorfaoo ID only the interface ID part of the source IPv6 
address and the judgment information representing whether to relay or discard, In 
association with each other. 

7. (currently amended): The network authentication apparatus as claimed 
in claim 6, 

wherein the MAC filtering unit compares the destination MAC address and the 
source MAC address contained in the received packet with the destination MAC 
address and the source MAC address stored in the MAC filtering information storage 
unit, and when the addresses match with each other, determines whether to relay 
the received packet to the packet relay unit or discard the packet in accordance with 
the judgment information associated with the destination MAC address and the 
source MAC address, and 

wherein the IP filtering unit compares the destination MAC address and the 
souroo I Pv6 intorface I D onlv the interface ID part of the source IPv6 address 
contained in the received packet with the destination MAC address and tho sourco 
I Pv6 intorface ID only the interface ID part of the source IPv6 address stored in the IP 
filtering information storage unit, and when the addresses and interface \D s\D oarts 
match with each other, determines whether to relay the received packet to the 
packet relay unit or discard the packet in accordance with the judgment information 
associated with the destination MAC address and th e sourc e I Pv6 int e rface I Do nly 
the interface ID part of the source IPv6 address . 
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8. (currently amended): The network authentication apparatus as claimed 
in claim 1, further comprising: 

an authentication unit that receives an authentication request from an arbitrary 
information terminal device connected to the network interface unit via a network^ 
and that executes oxocut i ng authentication based on predetermined information 
received from ro l atod to the arbitrary information terminal device. 

9. (currently amended): The network authentication apparatus as claimed 
in claim 8, 

wherein the authentication unit comprises an authentication information 
storage unit that stores a user ID, password, and IPv6 intorfaco ID onlv the interface 
ID part of the source IPv6 address or MAC address, in association with each other, 
and performs authentication by comparing a user ID, password, and IPv6 interface 
4 Donlv the interface ID part of the source IPv6 address or MAC address received 
from the arbitrary information terminal device with the user ID, password, and 4Pv§ 
i nt e rfac e I D onlv the Interface ID part of the source IPv6 address or MAC address 
stored in the authentication information storage unit, 

10. (previously presented): The network authentication apparatus as 
claimed in claim 1 , further comprising: 

a security control unit that generates or exchanges a key for packet 
encryption or decoding for each communication counterpart, using a key exchange 
protocol; and 

a security processing unit that executes authentication of at least the received 

packet, using the key generated by the security control unit. 
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1 1 . (currently amended): A network authentication system comprising: 

an authentication seiver that receives an authentication request from an 
arbitrary information terminal device connected via a network^ and that executes 
oxocuting authentication based on predetermined information received from f etated 
te the arbitrary information terminal device; and 

a network node device connected to the network and that relays a packet 
received from the network, 

wherein the network node device comprises: 

a network interface unit connected with the network and that 
transmits/receives a packet; 

a packet relay unit that relays a received packet in accordance with a 
destination address of the received packet; and 

a filtering processing unit that extracts one or more of a destination MAC 
(Media Access Control) address and a destination IPv6 (Internet Protocol version 6) 
address and a source MAC address, and that extracts onlv an interface ID part of a 
source IPv6 address contained in the received packet, and that determines whether 
to relay the received packet to the packet relay unit or discard the packet in 
accordance with: 

one or more of a dost i nation t he destination MAC (Med i a Accogg Control) 
address and a dest i nation the destination IPv6 (Intornot Protocol vers i on 6) address 
and a source t he source MAC address; and 

onlv the interface ID part of the source IPv6 address a sourco I Pv6 intorfaco 
ID. conta i ned in received from the received packet, 
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wherein the filtering processing unit determines a condition for a 
determination of whether to relay or to discard based on the authentication result bv 
the authentication server, and 

wherein the filtering processing unit relays only a packet addressed to the 
authentication server to the packet relay unit, of packets sent from an arbitrary 
information terminal device that is not authenticated by the authentication server. 

12. (currently amended): The network authentication system as claimed in 
claim 1 1 , 

wherein the filtering processing unit of the network node device further 
comprises: 

a filtering information storage unit that stores at least one or more of the 
destination MAC address and the destination IPv6 address and the source MAC 
address , that stores th o sourc o IPv6 intorfaco ID t he interface ID part of the source 
IPv6 address , and that stores judgment information representing whether to relay or 
discard in association with each other; and 

a processing unit that compares: 

(a) one or more of the destination MAC address and the destination IPv6 
address and the source MAC address (b) tho sQurco IPv6 intorfaco ID onlv the 
interface ID part of the source IPv6 address conta i nod in extracted from the received 
packet with (a) one or more of the destination MAC address and the destination IPv6 
address and the source MAC address and (b) th e source I Pv6 i ntorfaco ID onlv the 
interface ID part of the source IPv6 address stored in the filtering information storage 
unit, 
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wherein when the addresses and 40 slD parts match with each other, 

determining whether to relay the received packet to the pacl<et relay unit or discard 

the packet in accordance with the judgment information associated with (a) one or 

more of t he destination MAC address e rand the destination IPv6 address and the 

source MAC address and (b) tho source I Pv6 i ntorfaco I D the interface ID part of the 

source IPv6 address . 

13. (currently amended): The network authentication system as claimed in 
claim 12, 

wherein the authentication server includes an instruction issuing unit that adds 
an instruction of the arbitrary information terminal device when the arbitrary 
Information terminal device is authenticated, 

wherein the network node device includes a change unit that newly registers 
th o I Pv6 int e rfac e ID only the interface ID part of the source IPv6 address of the 
arbitrary information terminal device as the sourc e IPv6 interface ID part of the 
source IPv6 address into the filtering information storage unit together with the 
judgment information representing relay in accordance with an instruction from the 
authentication server, and 

wherein the filtering processing unit relays a packet sent from the arbitrary 
information terminal device authenticated by the authentication server, to the packet 
relay unit. 



14. 

claim 1 1 , 



(currently amended): The network authentication system as claimed in 
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wherein the filtering processing unit of the network node device further 

comprises: 

a MAC filtering unit that deternnines whether to relay the received packet to 
the packet relay unit or discard the packet in accordance with the destination MAC 
address and the source MAC address contained in the received packet; and 

an IP filtering unit that determines whether to relay the received packet to the 
packet relay unit or discard the packet in accordance with the destination MAC 
address and the source IPv6 i ntorfaco I D onlv interface ID part of the source IPv6 
address contained in the received packet. 

15. (currently amended): The network authentication system as claimed in 
claim 14, 

wherein the filtering processing unit of the network node device further 
comprises: 

a filtering information storage unit that stores at least the destination MAC 
address^ and the source MAC address or the source I Pv6 i nterfac e I D onlv the 
interface ID part of the source IPv6 address, and judgment information representing 
relay or discard in association with each other, 

wherein the MAC filtering unit compares the destination MAC address and the 
source MAC address contained in the received packet with the destination MAC 
address and the source MAC address stored in the filtering information storage unit, 
and when the addresses match with each other, determines whether to relay the 
received packet to the packet relay unit or discard the packet in accordance with the 
judgment information associated with the destination MAC address and the source 
MAC address, and 
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wherein the IP filtering unit compares the destination MAC address and the 
sQurc Q IPv6 interfac e ID onlvthe interface ID part of the source IPv6 address 
contained in the received packet with the destination MAC address and th e source 
I Pv6 intorfao e ID onlv the Interface ID part of the source IPv6 address stored in the 
filtering information storage unit, and 

wherein when the addresses and interface ID &ID parts match with each other, 
determines whether to relay the received packet to the packet relay unit or discard 
the packet in accordance with the judgment information associated with the 
destination MAC address and tho Gourco I Pv6 intorfacQ ID onlv the interface ID part 
of the source IPv6 address , 

1 6. (currently amended): A switch network a pparatus comprising: 
plural network interface units connected with a network and 

transm i tting/roco i v i no t hat transmit/receive p ackets ; 

a packet switc h relav unit that relays a received packet between the plural 

network interface units in accordance with a destination address of the received 

packet; aod 

a filtering processing unit that extracts one or more of a destination MAC 
(Media Access Controh address and a destination IPv6 ( Internet Protocol version 6) 
address and a source MAC address, and that extracts onlv an interface ID part of a 
source IPv6 address contained in the received packet, and that determines whether 
to relay the received packet to the packet switch unit or discard the packet in 
accordance with: 

one or more of a destination MAC address and a dest i nation the destination 

IPv6 address and a sourc e t he source MAC address; and 
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only the interface ID part of the source IPv6 address a sourco IPv6 i ntorfaco 
I D. conta i nod in extracted from t he received packetiand 

an authentication unit that executes authentication based on predetermined 
information received from an arbitrary information terminal device connected to one 
of the network interface units via the network, 

wherein the filterino processino unit determines a condition for a 
determination of whether to relav or discard based on the authentication result bv the 
authentication unit. 
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